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Amendments to the Claims: 

This listing of claims will replace all prior versions, and listings, of claims in the application: 



1 . (Previously Presented) A computer implemented method comprising: 

at a network access device communicably coupled to a host network, sensing a user device 
coupled to a port of the network access device; 

determining, by the network access device, if the user device supports a user authentication 
protocol used by the host network, the determining comprising polling the user device 
for the user authentication protocol, the user authentication protocol comprising a 
protocol to validate the identity of a user of the user device; and 

placing, by the network access device, the port into a semi-authorized access state if the 
determining indicates that the user device does not support the user authentication 
protocol, the semi-authorized access state providing the user device with limited 
network access. 

2. (Previously Presented) The method of claim 1, wherein the semi-authorized state limits 
access by the user device to a network, the network selected from the group comprising a 
Voice over Internet Protocol (VoIP) network, the Internet, and a low security virtual local 
area network (VLAN). 

3-4. (Cancelled) 

5. (Previously Presented) The method of claim 1, wherein the placing comprises selectively 
placing the port into one of a plurality of semi-authorized access states. 
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6. (Previously Presented) The method of claim 5, wherein the placing comprises: 
determining a type of the user device; and 

selectively placing the port into one of a plurality of semi-authorized access states based on 
the type of the user device. 

7. (Previously Presented) The method of claim 6, wherein the selectively placing comprises 
selectively placing the port into a semi-authorized access state that limits access by the user 
device to a network comprising a Voice over Internet Protocol (VoIP) network. 

8. (Previously Presented) The method of claim 6, wherein the selectively placing comprises 
selectively placing the port into a semi-authorized access state that limits access by the user 
device to a network comprising the Internet if the user device is a portable computing 
device. 

9. (Previously Presented) The method of claim 1 , wherein the user authentication protocol is 
IEEE 802. lx. 

10. (Previously Presented) The method of claim 1, wherein the network access device 
comprises a network switch. 

1 1 . (Previously Presented) A network access device comprising: 
a plurality of input ports; 

a plurality of output ports; 

a switching fabric for routing data received on the plurality of input ports to at least one of 
the plurality of output ports; and 
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control logic adapted to determine, by the network access device, whether a user device 
coupled to one of the plurality of input ports supports a user authentication protocol 
used by a host network, and to place, by the network access device, the one of the input 
ports in a semi-authorized access state if the determination indicates the authentication 
protocol is not supported, the semi-authorized access state providing the user device 
with limited network access, the determining comprising polling the user device for the 
user authentication protocol, the user authentication protocol comprising a protocol to 
validate the identity of a user of the user device. 

12. (Previously Presented) The device of claim 11, wherein the semi-authorized state limits 
access by the user device to a network, the network selected from the group comprising a 
Voice over Internet Protocol (VoIP) network, the Internet, and a low security virtual local 
area network (VLAN). 

13-14. (Cancelled) 

15. (Previously Presented) The device of claim 11, wherein the control logic is adapted to 
selectively place the one of the input ports into one of a plurality of semi-authorized access 
states. 

16. (Previously Presented) The device of claim 15, wherein the control logic is adapted to 
determine a type of the user device and to selectively place the one of the input ports into 
one of a plurality of semi-authorized access states based on the type of the user device. 
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17. (Previously Presented) The device of claim 16, wherein the control logic is adapted to 
selectively place the one of the input ports into a semi-authorized access state that limits 
access by the user device to a network comprising a Voice over Internet Protocol (VoIP) 
network. 

18. (Previously Presented) The device of claim 16, wherein the control logic is adapted to 
selectively place the one of the input ports into a semi-authorized access state that limits 
access by the user device to a network comprising the Internet if the user device is a portable 
computing device. 

19. (Previously Presented) The device of claim 11, wherein the user authentication protocol is 
IEEE 802. lx. 

20. (Previously Presented) A network system, comprising: 
a host network that uses a user authentication protocol; 

a network access device communicatively coupled to the host network; and 
a user device coupled to a port of the network access device; 
wherein the network access device is adapted to: 

determine whether the user device supports the user authentication protocol; and 
place the port in a semi-authorized access state if the determination indicates the 
user authentication protocol is not supported, the semi-authorized access state 
providing the user device with limited network access, the determining comprising 
polling the user device for the user authentication protocol, the user authentication 
protocol comprising a protocol to validate the identity of a user of the user device. 



Page 5 of 13 



Attorney Docket No.: FOUND-0057 (434103-000048) 
21 . (Previously Presented) The network system of claim 20, wherein the semi-authorized state 
limits access by the user device to a network, the network selected from the group 
comprising a Voice Over Internet Protocol (VoIP) network, the Internet, and a low-security 
virtual local area network (VLAN). 

22-23. (Cancelled) 

24. (Previously Presented) The network system of claim 20, wherein the network access device 
is adapted to selectively place the port into one of a plurality of semi-authorized access 
states. 

25. (Previously Presented) The network system of claim 24, where the network access device is 
adapted to determine a type of the user device and to selectively place the port into one of a 
plurality of semi-authorized access states based on the type of the user device. 

26. (Previously Presented) The network system of claim 25, wherein the network access 
device is adapted to selectively place the port into a semi-authorized access state that 
limits access by the user device to a network comprising a Voice over Internet Protocol 
(VoIP) network. 

27. (Previously Presented) The network system of claim 25, wherein the network access 
device is adapted to selectively place the port into a semi-authorized access state that 
limits access by the user device to a network comprising the Internet if the user device 
is a portable computing device. 
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28. (Previously Presented) The network system of claim 20, wherein the user 
authentication protocol is IEEE 802. lx. 

29. (Previously Presented) The network system of claim 20, wherein the network access 
device is a network switch. 

30. (Cancelled) 

31. (Previously Presented) An apparatus comprising: 

means for sensing a user device coupled to a port of a network access device; 

means for determining, by the network access device, if the user device supports a user 
authentication protocol used by the host network, the determining comprising polling 
the user device for the user authentication protocol, the user authentication protocol 
comprising a protocol to validate the identity of a user of the user device; and 

means for placing, by the network access device, the port into a semi-authorized access state 
if the determining indicates that the user device does not support the user authentication 
protocol, the semi-authorized access state providing the user device with limited 
network access. 

32. (Previously Presented) A computer implemented method comprising: 

at a network access device communicably coupled to a host network, sensing a user device 

coupled to a port of the network access device; and 
at the network access device, allowing the user device limited access to a network via the 

network access device if it is determined that the user device is unable to communicate 
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using a particular user authentication protocol, the user authentication protocol 
comprising a protocol to validate the identity of a user of the user device. 

33. (Previously Presented) The method of claim 32, further comprising performing further user 
authentication in accordance with the user authentication protocol if it is determined that the 
user device is able to communicate using the user authentication protocol. 

34. (Previously Presented) The method of claim 32 wherein the limited access comprises less 
access than access afforded a user device that is successfully authenticated using the user 
authentication protocol. 

35. (Previously Presented) The method of claim 34 wherein the limited access comprises access 
to a low-security Virtual Local Area Network (VLAN). 

36. (Currently Amended) A network access device comprising: 
a memory; 

a plurality of input ports; 

a plurality of output ports communicably coupled to a host network ; 

a switching fabric for routing data received on the plurality of input ports to at least one of 
the plurality of output ports; and 

control logic at the network access device configured to: allow the user device limited 

access to a network if it is determined that the user device is unable to communicate 

using a particular user authentication protocol, the user authentication protocol 

comprising a protocol to validate the identity of a user of the user device 

sense a user device coupled to one of the input ports; 

Page 8 of 13 



Attorney Docket No.: FOUND-0057 (434103-000048) 
determine if the user device supports a user authentication protocol used by the host 

network, the user authentication protocol comprising a protocol to validate the 

identity of a user of the user device; and 
place the port into a semi-authorized access state if the determination indicates that the 

user device does not support the user authentication protocol the semi-authorized 

access state providing the user device with limited network access . 



37. (Previously Presented) The network access device of claim 36 wherein the control logic is 
further configured to perform further user authentication in accordance with the user 
authentication protocol if it is determined that the user device is able to communicate using 
the user authentication protocol. 

38. (Previously Presented) The network access device of claim 36 wherein the limited access 
comprises less access than access afforded a user device that is successfully authenticated 
using the user authentication protocol. 

39. (Previously Presented) The network access device of claim 38 wherein the limited access 
comprises access to a low-security Virtual Local Area Network (VLAN). 

40. (Cancelled) 

41. (Currently Amended) An apparatus comprising: 
a memory; 

means for sensing a user device coupled to a port of the apparatus, the apparatus 

communicably coupled to a host network; and 
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means for determining if the user device supports a user authentication protocol used by the 
host network, the user authentication protocol comprising a protocol to validate the 
identity of a user of the user device; and 
means for placing the port into a semi-authorized access state if the determining indicates 
that the user device does not support the user authentication protocol the semi- 
authorized access state providing the user device with limited network access 
moans at the network access device for allowing the - user device limited access to a network 
via the network access device if it is determined that the user device is unable to 
communicate using a particular user authentication protocol, the user authentication 
protocol comprising a protocol to validate the identity of a user of the user device . 
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